Re: Sudo issues

If your users are using the "sudo su - mark" construct, they're effectively asking sudo to allow them to become root so that su can switch them to mark without asking for a password. Your sudo configuration does not allow that.

With the rules you have specified, your users should use "sudo -u mark -i". It achieves the same result as "sudo su - mark", but in a different way.